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SECTION  I 


INTRODUCTION 

The  role  o f  insurgent  inf rastruc ture  is  uniquely 
important  in  a  revolutionary  movement.  Attacking  that 
inf restructure  must  therefore  be  an  integral  part  of  any 
counterinsurgency  plan.  Un f or tunatel y ,  the  role  of 
inf restructure  and  the  techniques  of  defeating  it  are  not 
commonly  understood  in  today's  military. 

In  order  to  defeat  the  inf  rast.ruc  ture ,  one  must  be  able 
to  identify  it.  This  is  a  process  of  intelligence 
collection  and  analysis,  facets  of  which  are  unique  to  low- 
intensity  conflict  (LIC).  The  Army  currently  does  not  have 
sufficient  doctrine  to  meet  this  need.  Army  field  manuals 
provide  some  of  the  necessary  information  and  methods. 
Oenerally,  however,  they  fail  to  sufficiently  explain,  or 
completely  omit,  techniques  which  are  critical  to  the 
synthesis  of  intelligence. 

Intelligence  analysis  in  counterinsurgency  (COIN) 
requires  a  blend  of  military  and  police  intelligence 
techniques.  The  Army's  manual  for  this,  FM  34-3 
Intelligence  Analysis,  provides  some  tools  for  use  in  a  COIN 
environment,  as  well  as  some  insurgent  charac teristics . 
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However,  the  manual  is  less  instructive  than  it  is 
descriptive.  Pattern  analysis,  a  primary  technique,  is  only 
briefly  mentioned.  Link  analysis,  a  key  police  method  of 
determining  associations,  is  not  defined  at  all. 

Similarly,  information  storage  and  retrieval  is 
addressed  only  in  terms  of  files  and  overlays.  While  these 
are  described  well,  no  mention  is  made  of  managing 
information,  or  how  to  design  an  adequate  file  system.  Yet 
these  techniques  are  readily  available  from  police 
intelligence  units. 

Human  intelligence  (HUMINT)  collection,  another  staple 
in  LIC,  is  covered  in  FM  34-60,  Counter In  tel  1 iaence .  and  FM 
34-60A  (S/NFN),  Counterintel 1 iaence  Operations.  Much  of  the 
technique  and  tradecraft  discussed  in  these  sources  is 
generic,  though  with  a  distinctly  NATO  flavor.  They  thus 
require  interpretation  to  apply  to  third  world  insurgencies. 

These  shortfalls  are  covered  neither  by  the  Military 
Intelligence  School  nor  by  the  Special  Warfare  Center 
curricula,  both  of  whom  have  vested  interests.  Training  in 
these  techniques  is  rare  and  Army  institutional  expertise 
resides  mostly  in  personnel  assigned  to  third-world 
operational  areas .  In  short,  this  means  that  most 
analysts/advisors  were  under-prepared  when  committed  unless 
they  had  prior,  in -country  experience  in  intelligence  work. 

The  purpose  of  this  paper,  then,  .is  to  define  insurgent 
infrastructure  and  its  role  in  prosecuting  a  revolution;  to 


chart  a  methodology  for  identifying  that  infrastructures 


and 


finally,  to  present  considerations  for  neutralizing  it. 

This  study  expands  on  the  doctrine  presented  in  the 
above  manuals,  as  well  as  in  FM  34-130  In  te 1 1 ioence 
Preparation  of  the  Battlefield.  It  incorporates  police 
intelligence  methods  and  lessons  of  past  wars.  These 
techniques,  mostly  common  sense,  are  used  today  by  law 
enforcement  agencies  as  well  as  by  U.S.  military  personnel 
in  Foreign  Internal  Defense  (FID)  programs.  A  communist, 
mass-oriented  insurgency  provides  the  context  for  the 
study.* 


gjeXq.r.auD.c). 

Inf rastructure  is  an  American  term  coined  during  the 
Vietnam  War,  but  never  used  by  the  Vietnamese  communists.  “ 
It  refers  to  the  individuals  and  groups  which 
organizationally  constitute  the  "party,  civil,  and  military 
elements"  of  the  insurgency.  3  (See  Figure  1. )  Though  often 
used  when  speaking  of  political  subversion  cells,  it  also 
includes  the  local  militia  and  small  guerrilla  units  which 
respond  to  those  cells.  In'rastructure  is  alternately  known 
as  parallel  hierarchy,  4  shadow  government  ,s  and  in  older 
references,  the  underground.  “ 

In  theory,  infrastructure  extends  from  the  villages  all 
the  way  to  the  national-level  Central  Committee,  and 
includes  the  Military  High  Command  as  well. 


Notably, 


however,  Main  Force  guerrilla  units  are  not  considered  part 


COMMUNIST  PARTY 
I - “““ - 1 

Military  I  Civil 


Figure  1 .  7 

of  the  insurgent  infrastructure,  Though  highly  politicized, 
Main  Force  units  are  strictly  military  formations  with 
combat  missions.  They  do  not  respond  to  regional  or 
district  party  committees." 

This  study  focuses  on  in f ras true ture  at  the  district 
level  and  below.  It  is  these  individuals  and  cells  who 
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bring  the  revolution  into  the  homes  of  the  people,  and  it  is 
they  who  subvert  the  government  and  coerce  papular 
cooperation.  In  Vietnam,  party  and  civilian  leaders  of  the 
inf rastructure  were  called  cadres. 

In  his  book  Silence  Was  A  Weapon.  Stuart  Herrington 
further  classifies  the  party/civil  cadres  as  "legal"  and 
"illegal".’  A  legal  cadre  is  an  insurgent  who  operates 
covertly  as  a  member  of  the  inf rastructure  but  overtly  as  a 
legitimate  member  of  the  community.  He  has  been  recruited 
from  the  community  and  has  an  ID  card,  a  family,  and  a  job. 
An  illegal  cadre  lives  in  a  bunker  in  the  woods  by  day  and 
operates  clandestinely  at  night,  infiltrating  and 
organizing . 

Of  the  various  elements  of  infrastructure ,  the  party 
and  civil  cadres  are  the  most  dangerous.  They  are  the 
political  subversives  who  prosecute  the  insurgency  and 
direct  the  activities  of  the  local  guerrilla  units  they  have 
recruited.  Thev  coordinate  the  collection  of  taxes  to 
support  these  guerrillas  as  well  as  Main  Force  units.  In 
directly  art-.acking  the  insurgent  inf  rastructure,  the 
established  government  must  give  priority  to  destruction  of 
these  cadres  over  destruction  of  guerrillas.  i<:i 

In  vying  for,  or  coercing,  the  support  of  the  people, 
the  insurgent  takes  an  indirect  approach  to  displacing  the 
established  government.  He  chooses  this  path  because  he 
does  not  possess  the  military  power  to  directly  challenge 
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the  established  government.  He  also  chooses  it  because  the 
government  has  allowed  the  social,  political,  and  economic 
conditions  to  exist  which  make  the  people  susceptible  to  his 
ideology. 

In  theory,  the  reverse  also  is  true.  That  is,  if  the 
government  worked  to  eliminate  the  root  causes  of  the 
insurgency,  it  could  forego  combatting  the  infrastructure 
directly. 

In  practice,  this  does  not  work.  11  Most  governments 
conducting  counterinsurgency  simply  do  not  have  the 
resources  and  political  will  to  quickly  undo  the  conditions 
which  have  fostered  the  insurgency.  Additionally,  if  not 
attacked  directly,  the  inf restructure  can  negate  the  efforts 
of  the  government  through  terrorism,  sabotage,  and  military 
action.  The  government  must  both  attack  the  infrastructure 
and  work  to  alleviate  the  conditions  which  have  allowed  the 
insurgency  to  develop,13 

The  identification  of  insurgent  infrastructure  is 
actually  the  threat  evaluation/threat  integration  portion  of 
an  intelligence  preparation  of  the  battlefield  [IPB).  FM 
34-130,  Intelligence  Preparation  of  The  Battlefield, 
provides  a  format  for  a  low-intensity  conflict  (LIC)  IPB, 
but  mentions  only  briefly  the  most  important  prerequisite 
for  intelligence  analysis — a  comprehens: ve  knowledge  of  the 
insurgent's  organization  and  tactics.  Field  Manual  34-3, 
Intelligence  Analysis,  also  addresses  this  requirement  but 
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in  only  slightly  greater  detail.  To  achieve  this 

comprehensive  knowledge,  the  study  of  insurgent  organization 
begins  with  a  generic  model  and  then  transitions  to  an 
operational  area,  or  country,  model. 

Although  each  insurgency  is  unique,  type-insurgenc ies 
(in  this  study,  Maoist  mass-oriented )  usually  have  common 
features  which  allow  development  of  a  generic  model.  (Refer 
again  to  Figure  i.  Another  version  of  this  model  is  found 
in  Appendix  D,  FM  100-20  Low- In tensi tv  Conflict. )  The 
broader  an  ana  1 yst/advisor ' s  study  of  the  generic  model,  the 
better  his  framework  for  analyzing  and  assimilating  the 
theater  model . 

In  order  to  create  the  inf rastructure  shown  in  the 
model,  the  insurgent  operates  in  units  known  as  cells.  The 
cell  is  the  basic  building  block  of  insurgent 
inf rastructure.  Historically,  cells  are  composed  of  a 
leader  and  two-seven  members.  The  actual  size  of  the  cell 
is  determined  by  its  mission  and  the  condition*  under  which 
it  functions.  Security  is  the  principal  consideration . 
Cells  are  organized  and  assigned  either  by  geographic  area 
or  by  mission.  ie 

In  areas  where  the  insurgent  is  militarily  strong  and 
the  government  has  little  popular  support,  cadres  may 
operate  overtly  in  a  village,  or  barangay  (a  Philippine  term 
for  village).  Some  cells  may  become  fairly  large. 
Conversely,  if  the  government  presents  an  immediate  threat 
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or  has  the  support  of  the  people,  greater  compartmenting 
results.  Cells  are  smaller  and  communications  are  more 
formal  (written).  Under  these  circumstances ,  insurgents 
will  use  a  standard  technique  of  clandestine  communications 
known  as  a  cut-out.  A  cut-out  is  a  break  in  the  linkage 
between  two  persons  or  cells.  It  is  a  security  measure 
taken  to  prevent  disclosure  of  an  association  or 
relationship  and  may  involve  the  use  of  an  intermediary  or 
mai 1 -drop . 

Cell  designs  vary  by  mission  and  usually  represent  a 
compromise  between  the  need  for  organizational  efficiency 
and  the  need  for  security.**  Normally  there  are  three  types 
of  generic  calls:  operational,  intelligence  and  auxiliary.  xv 

An  operational  cell  executes  one  or  a  variety  of 
missions  and  members  of  the  cell  are  usually  known  to  each 
other.  (See  Figure  2.)  Cell  members  infiltrate  and  organize 
the  populace,  collect  taxes,  agitate,  propagand ize ,  or 

OPERATIONAL  CELL 


Figure  2.** 
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r 

recruit.  Soma  operational  calls  may  specialize  in  sabotage, 
terrorism,  or  traitor  elimination,  expanding  their  size  as 
necessary  to  meet  mission  requirements. 

Intelligence  cells  are  highly  compartmented  units  whose 
members  are  not  known  to  the  infiltrated  agency  or  community 
and  rarely  to  each  other.  (See  Figure  3.)  This 

i 

compartmenting  preserves  the  security  of  the  cell  if  a 
member  is  compromised.  The  use  of  cut-outs  is  common  here. 

INTELLIGENCE  CELL 


Figure  3.x<r 

Auxiliary  cells  organize  sectoral  and  functional  fronts 
within  a  community.  (See  Figure  4.)  Sectoral  fronts 
accomplish  social  organization  such  as  youth,  women's  and 
laborers'  groups.  Functional  fronts  (e.g.,  health,  finance, 
education)  accomplish  civil  administration  and  logistical 
support  for  guerrillas.  Operational  cells  normally  recruit 
auxiliary  cell  leaders  and  assistant  cell  leaders  from 
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within  the  village,  or  barangay.  Once  indoctrinated  and 
trained  these  cell  leaders  fall  into  the  category  of  legal 
cadre . 


AUXILIARY  CELL 


Figure  4. 80 

Although  an  intelligence  cell  may  be  established 
beforehand,  an  operational  cell  is  normally  the  first  to 
openly  contact  the  local  people.  An  intelligence  cell  may 
remain  in  place  and  retain  its  cover  even  after  arrival  of 
the  operational  cell.  81  In  this  manner  it  continues  to 
provide  the  in f rastruc ture  hierarchy  with  intelligence  a*i 
well  as  progress  reports  on  the  operational  cel  Its). 

Cells  may  be  arranged  in  parallel,  or  in  series,  to 
achieve  a  desired  goal  or  condition.  Parallel  cells  provide 
redundancy,  a  particularly  important  capability  in 
intelligence  collection  (Fig. 5),  The  existence  of  a 

parallel  cell  may  be  unknown  to  its  counterpart,  thereby 
prf'-’erving  capability  if  one  cell  is  compromised. 


PARALLEL  CELLS 


PRIMARY 

CELL 


BRANCH  LEADER 


INTERMEDIARY 
OR  MAIL-DROP 

CELL  LEADERS 


INTERMEDIARY 
OR  MAIL-DROP 


SECONDARY 

CELL 


MEMBERS 


Figure  3.*® 

Insurgents  organize  cells  in  series  to  achieve  production 
when  security  for  a  single  centralized  operation  is 
unattainable  (Fig, 6).  Historical  examples  include  small 
arms  production  as  well  as  newspaper  printing  and 
dist.ribu  tion  .  33 


CELLS  IN  SERIES 


Figure  6  .*** 
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The  insurgent  leadership  trains  it*  operational  and 
intelligence  cell  member*  well.  Cell  leader*  are  ideologues 
who,  in  many  cases,  have  attended  indoc trination  and 
technical  school*,  some  out-of-country.  The  production  of 
insurgent  cadre*  who  poises*  an  iron  resolve  is  critical  to 
fighting  a  protracted  peoples'  war. 

When  deemed  critical,  cells  include  communist  p*rty 
members.  The  party  recruits  selectively  and  membership 
indicates  comprehensive  commitment  by  an  individual.  3* 
Party  member*  in  a  cell  add  prestige,  reliability  and 
backbone. 

To  illustrate  some  of  these  points,  consider  the  armed 
propaganda  unit  (APU),  or  team.  This  is  an  operational  cell 
common  to  Maoist  insurgencies.  A  Vietnamese  invention,  APUs 
have  appeared  in  Thailand,  Kampuchea  briefly,  and  in  the 
Philippines.  Under  its  original  charter  (1944),  the  APU  was 
to  be  the  element  which  carried  the  revolution  to  the 
people,  inf i 1 trating  rural  communities  and  organizing  the 
people.  It  was  to  us®  its  weapons  only  for  protection  or 
martial  demonstrations.  (It  would  be  counterproductive  to 


use  the  weapons  for  terror,  reasoned 

Ho  Chi  Minh. 

)** 

This  non-violent 

concept  of 

mobi 1 i zing 

the 

peop  1  e 

changed  radically  in 

appl ication 

,  however, 

and 

armed 

terrorism  quickly  became  a  standard  insurgent  tool.  By  the 
end  of  1963,  Viet  Cong  armed  propaganda  units  had 
assassinated  roughly  13,000  village  chiefs,  teachers, 
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citizens,  and  government  representatives  in  South  Vietnam.  ~'T 

Generally,  insurgent  cadraa  still  prafar  parauasion  to 
coarcion  in  gaining  tha  aupport  of  tha  people.  Tha  initial 
lack  of  violancc,  thought  is  uaually  short-lived ,  Tha 
cadraa  tolarata  no  oppoaition  and  show  littla  compunction 
for  raaorting  to  tarrar  or  assassination .  In  tha 

Philippinaa,  for  instance,  an  APU  ia  employed  aftar  a  Sami- 
Legal  Team  (SLT)  haa  infiltrated  a  barangay.  Tha  SLT  than 
cal  la  in  an  armed  propaganda  unit  to  provide  "revolutionary 
juetice"  and  aalactive  coarcion. 

Tha  insurgent  hierarchy  gaographica 1 1 y  divides  tha 
country  baaad  nr>  ita  own  naada.  Boundariaa  may  coincide 
with  thoaa  of  the  government,  but  generally  do  not. 
Boundariaa  are  usually  drawn  baaad  on  tha  density  of 
inf rastruc ture.  If  tha  insurgency  io  atrong  in  an  area, 

call  density  ia  high  and  boundaries  may  be  close. 
Conversely,  if  the  revolution  has  enjoyed  little  success 
call  density  will  be  lower  with  boundaries  farther  apart.r’ 

A  complete  study  of  a  generic  modal  would  be  much  longer 
than  my  discourse  hare.  However,  the  vi*lue  of  such  a  study 
should  be  evident.  The  next  step  is  to  correlate  the 
generic  model  to  the  coun try-spec  i  f ic  model. 

The  purpose  ia  to  note  difference*  and  simi lari  tie# , 
while  accounting  for  each  function  portrayed  in  the  generic 
model.  Appendix  A  provide*  an  organizational  chart  of  the 
Communist  Party  of  tha  Philippines  (CPP)  for  comparison  to 
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Figure  i,  the  applicable  generic  model.®’0  It  contains  a 
description  of  modus  operand!  as  well.  Comparative  analysis 
of  the  two  models  reveals,  for  example,  that:  a  Semi-Legal 
Team  functions  initially  as  an  intelligence  cell)  that  it 
becomes  an  operational  cell  as  it  begins  organizing  the 
people;  and  that  there  is  presently  no  Main  Force  guerrilla 
unit  which  responds  to  the  NPA  High  Command. 

The  educational  preparation  I  have  described  here  is 
essential  prior  to  deployment  of  the  analyst/advisor .  Depth 
of  knowledge  imparts  a  broader  framework  f or  analysis  and  a 
better  basis  for  judgment.  Culture  and  geography  are  also 
critically  important  here.  Neither  native  wit  nor 
conventional  background  will  compensate  for  a  detailed 
knowledge  of  the  insurgent,  his  background,  or  his  methods. 


SECTION  II 
IDENTIFICATION 


Gradually  the  more  intelligent  officers  find 
themselves  developing  a  new  set  of  charac ter i a  tics 
such  as  deviousness,  patience,  and  a  determination 
to  outwit  their  opponents  by  all  means  compatible 
with  the  achievement  of  the  aim. 

-Frank  Kitson®1, 

The  techniques  described  here  expand  on  the  information 
in  the  doctrinal  manuals.  Since  insurgency  often  resembles 
organized  crime,  some  police  intelligence  methods  apply. 
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The  Intelligence  Cycle  shown  below  provides  the  structure 


for  a  logical  presentation  of  inf ormation s55* 


Directing 
Col lecting 
Processing  — 
Disseminatin 


Recording 

Evaluating 

Integrating 

Interpreting 


I  will  discuss  Collecting  and  Processing  functions  in 
detai  1 . 


Bjrggung, 

Simply  put,  selecting  and  prioritizing  targets  is  a 
"management  issue".  3:3  1 1  requires  balancing  resources  with 
the  expected  utility  of  th#  information,  the  criticality  of 
the  target  and  the  probability  of  success.  The 

analyst/advisor  must  inventory  the  available  collection 
assets.  Informant  operations  usually  match  host-nation 
capabilities  most  closely,  though  many  countries  possess  a 
growing  technological  capability  as  well.  He  should 

understand  the  capabilities  of  these  systems  and  may  request 
U.S.  asset  collection  (through  U.S.  channels)  to  complement 
the  host  nation's  effort. 


CgUffi-tiM 

In  a  counterinsurgency  human  intelligence  (HUMINT)  is 
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this  key  to  identifying  inf  restructure .  Signals  intelligence 
(SIB1NT)  and  imagery  intelligence  (IMINT)  should  not  be 
discounted  however.  Direction  finding,  monitoring,  and 
aerial  photo  reconnaissance  can  be  significant  multipliers 
in  the  intelligence  effort. 

Collection  systems  are  either  covert  or  overt,  the 
distinction  resting  in  whether  or  not  the  enemy  knows  he  is 
being  targeted.  Most  of  the  S1SINT  and  IMINT  collectors 
available  to  the  analyst/advisor  will  be  covert.  HUMINT 
collectors  fall  into  both  categories.  In  collecting 
information,  analysts/advisors  must  adhere  to  the  principle 
of  systematic  targeting.  Barring  a  "big  break",  this  is  the 
only  way  to  build  a  threat  profile.  Military  and  police 
patrols,  interrogators ,  village  self-defence  groups,  and 
other  official  intelligence  agencies  (military  and  police) 
are  overt  HUMINT  collectors.  Some  input  from  other  agencies 
may  come  in  the  form  of  intelligence  but  most  will  be  raw 
information.  The  analyst/advisor  must  impress  upon 
collectors  that  every  patrol  report,  every  in  ter roga t ion 
report,  every  captured  map,  notebook,  document,  etc.  is 
important  and  must  be  submitted  to  the  analysis  center. 

Enemy  documents  have  particular  importance.  Insurgents 
keep  meticulous  records.  Highly  centralized  command  and 
decentral ized  execution  foster  this.  Cell  or  unit  rosters, 
code  names,  cache  locations,  safe  deposit  box  numbers, 
infiltration  routes,  and  tax  collection  tallies  are  examples 
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of  valuable  information  if  submitted  in  a  timely  fashion. 

The  format  itself  of  a  captured  document  may  yield 
inf ormation .  By  analyzing  distribution  lists  on  insurgent 
directives  the  analyst/advisor  may  be  able  to  infer  local 
and  higher  political  boundaries  as  well  as  committee 

hierarchy  or  chain  of  command.*9  A  clear  picture  of  who- 
works-for — whom  will  be  essential  later  in  the  neutralization 
process . 

Population  control  measures  (if  any)  will  provide  the 
analyst/advisor  collection  opportun i ties .  Curfews  and 

identity  cards  in  conjunction  with  polite  checkpoints  may 
reveal  patterns  of  activity  indicative  of  tax/food 
collection,  messenger  traffic,  etc.  Synchronization  of 
police  and  military  efforts  is  a  requirement  here,  as 
throughout  the  counterinsurgency . 

Informants  are  covert  collectors.  Informant  operations 
are  potentially  very  lucrative,  but  require  skill  on  the 
parts  of  all  concerned.  Recruiting  and  managing  informants 
is  an  art.  This  is  the  job  of  the  "case  officer" 

The  ana  1 yst/advisor  may  perform  as  his  own  case  officer 
if  he  can  do  so  without  compromising  his  informant  net. 
Ethnic  heritage  and  language  skills  are  common  prohibitors. 
An  indigenous  case  officer  from  the  host  nation  military  is 
a  possible  solution. 

The  anal yst/advisor  must  develop  his  awn  case  officer 
selection  and  training  program.  The  doctrinal  reference  for 
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informant  operations,  development  of  covers,  and  clandestine 
communications  is  FM  34-60A,  Counterintelligence  Operations 
( S/NFN/WNINTEL ) .  The  analyst/advieor  should  look  for 
certain  character  attributes  in  addition  to  trainabi 1 i ty . 
Some  skills  are  instinctive  and  thus  not  trainable.  The 
case  officer  must  exhibit  reliability  and  the  native  wit  and 
interpersonal  skills  to  "make  it  on  the  street." 

Informants  are  vulnerable  so  security  is  paramount. 
Covers  must  be  carefully  developed  and  maintained.  The  case 
officer  must  respect  this  or  lose  informant  confidence. 

In  recruiting  informants,  the  case  officer  looks  for 
those  with  grievances  against  the  insurgents,  such  as  family 
members  of  a  victim,  Other  candidates  may  be  relatives  of 
soldiers  or  government  employees.  They  usually  possess  a 
predisposition  to  work  against  the  insurgency.  He  also 
looks  to  recruit  personnel  to  act  as  linkage  in  the 
informant  net.  These  are  people  who  overlook  an  activity 
node  such  as  a  market,  liquor  store  or  pharmacy.  To 
illustrate:  Inf  ormants  pass  spot  reports  to  a  local 
merchant  during  a  weekly  visit  to  the  marketpl ace ;  the 
merchant  passes  the  information  to  the  case  officer,  whose 
contact  with  the  merchant  is  s i tua tiona 1 1 y  plausible;  the 
case  officer  then  relays  the  information  to  the  analysis 
center , 

Information  is  perishable.  The  analyst/advisor  should 
insure  he  is  available  to  receive  the  information, 
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particularly  when  there  is  already  some  inherent  delay  such 
as  in  market  visits. 

Information  often  is  not  free.  Paying  informants  is  a 
problem  when  corruption  is  rife,  particularly  if  it  must 
change  hands  to  reach  its  target.  Even  with  a  well 
established  net,  however,  the  real  HUMINT  payoff 
historically  does  not  come  until  an  insurgent  cadre  member 
rallies  to  the  government.1"  This  may  occur  without  notice, 
or  as  a  result  of  capture.  A  sound  amnesty  program  provides 
the  government  some  leverage  here. 

The  analyst/advisor ' s  main  interest  in  recruiting  the 
insurgent  is  exploiting  his  knowledge  of  the  infrastructure. 
This  requires  skillful  in terrogation  even  if  the  cadre 
member  is  cooperative.  He  may  wish  to  protect  family  or 
himself.  In  such  cases,  information  from  other  insurgents 
can  be  used  to  advantage. 

When  more  than  one  cadre  member  has  been  recruited  or 
captured,  parallel  interrogation  can  be  a  significant 
multiplier.3*  Parallel  interrogation  involves  alternately 
questioning  one  insurgent,  then  the  other.  Here, 

information  from  one  insurgent  is  used  to  prompt  the  second. 
This  also  provides  some  depth  and  allows  the  interrogator  to 
evaluate  the  quality  of  the  information. 

After  analyzing  the  in terrogation  reuults,  the 
analyst/advisor  may  pursue  several  options  for  further 
exploitation  of  the  captured  insurgent.  If  the  insurgent 
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was  a  legal  cadre,  it  may  be  productive  to  use  him  in  an 
anti-insurgen t  propaganda  campaign.  Alternately,  he  may  be 
used  as  the  focus  of  a  disinformation  program  to  cause 
paranoia  and  de-stabilize  the  remaining  inf restructure . 

Other  options  include  guiding  government  forces  to  caches  or 
base  camps,  and  verifying  information  gained  from  subsequent 
captives.  The  analyst/advisor  must  protect  his  asset, 

however.  Once  insurgents  realize  a  former  cadre  has  rallied 

to  the  government,  they  will  mark  him  for  elimination. 

1  have  concentrated  on  HUMINT  while  discussing 

Collection  because  of  its  primacy  in  LIC.  The  potential  of 
technical  collection  means,  however,  should  not  be 
discounted.  As  with  other  elements  in  the  intelligence 
cycle,  the  ana  1 yst/advisor ' s  imagination  and  initiative 
determine  the  effectiveness  of  the?  collection  effort. 

Recording 

A  functional  information  storage  and  retrieval  system 
is  crucial  to  the  intelligence  process.3’’  Because 

counterinsurgency  is  a  protracted  effort,  the 
analyst/advisor  must  retain  information  over  a  long  period 
of  time.  The  goal  then  is  to  establish  a  system  which 
provides  the  best  balance  of  accessibility  and  ease  of 
storage.  Chapter  Nine  of  FM  34-3,  Intelligence  Analysis, 
describes  some  types  of  files  required  j**:‘  I  will  present 
some  techniques  for  meeting  those  requi remen ts .  Police 
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intelligence  units  use  the  systems  described  below.  They 
are  portrayed  as  manual  systems,  but  are  easily  automated. 

In  technical  terms,  a  storage  and  retrieval  system  will 
always  have  two  components:  the  index  and  the  file.*1  They 
are  present  in.  manual  and  automated  systems  alike,  and  in 
both  system  designs. 

The  two  basic  design  alternatives  are  the 
classification  system  and  the  accession  system.  *a  Both  use 
alphabetical  indexes  to  designate  the  location  of 
information  within  the  system.  The  classification  system  is 
organized  on  the  concept  of  classes  of  information,  or  data 
bases.  The  accession  system  does  not  use  data  bases,  but 
files  items  serially,  or  in  the  order  received.  The  index 
for  the  accession  system  is  necessarily  more  comprehensive 
than  that  of  the  classif ication  system. 

Appendix  B  contains  a  detailed  description  of  each 
system  and  examples.  It  also  includes  a  design  comparison 
matrix.  Some  analysts/advisors  prefer  the  classification 
system  because  of  the  data  base  feature.  This  is  a  more 
intuitive  method  of  storing  information  and  it  lends  itself 
well  to  automation. 

The  analyst/advisor  may  create  or  alter  data  bases  as 
needed.  He  thould  anticipate  using  the  following 

categories i 

Personal ities-a 1 1  names  generated  by  collectors. 

Radio  Telephone  Operators  (RTO) 
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War  Names  (Nom  de  Guerre) 


Organizations/Guerri 1 la  units  (Order  of  Battle) 

Base  Camps 

Girlf riends/sexual  contacts 

Propaganda  Themes 

Cities/ToMns 

B*r*ng*y/Si tio 

Data  base  formats  are  the  preference  of  the  analyst. 
Suggested  formats  are  at  Appendix  C.  After  recording  basic 
information  in  a  given  format,  the  analyst/advisor  should 
record  subsequent  information  chronologically. 

In  a  manual  system,  each  file  (each  name,  camp,  RTO, 
etc.)  has  its  own  file  folder.  An  automated  system  does  not 
require  hard  copy  for  each  file  in  a  data  base  (field). 
Automation,  however,  does  not  mitigate  the  requirement  to 
keep  dossiers  on  all  propaganda  themes  and  personal itiss . 
(The  analyst/advisor  should  select  a  cutoff  for  keeping 
dossiers;  e.g.  all  cell  leaders,  all  .squad  leaders  and 
above,  all  APU  members,  etc.) 

Some  analysts  consider  a  chrono 1 ogica 1  master  incident 
file  a  must.  Specific  incident  files  (mines,  assassination , 
etc.)  are  optional. 

In  the  classification  system,  retrieving  information  is 
faster  when  a  greater  number  of  classes  or  data  bases  is 
used.  However  as  files  grow,  they  require  more  maintenance. 
This  is  a  further  draft  on  manpower  and  another  resource 
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consideration  for  the  analyst/advisor . 

Overlays  provides  a  second  method  at  storing  data.  The 


LIC  IPB  (FM  34-130,  Appendix  E)  provides  a  starting  point  in 
determining  types  of  overlays  needed.  These  "event 


template"  overlays  facilitate  analysis  but  require  periodic 
updating  (seasonal  drainage  changes,  new  trails,  etc.).  The 
intel  1. igence  analysis  manual  (FM  34-3,  Chapter  9)  also 
discussed  these  event  overlays  and  various  types  of  working 
overlays,  as  well. 

Current  field  manuals  list  a  number  of  overlays. 
Several  fall  into  the  event  template  category. ** 

LOC:  Lines  of  communication.  Road,  trails,  navigable 

rivers . 

Infil tration/Exfiltration  Routes:  Insurgent  avenues  of 
approach/egress . 

Cover /Concealment:  Should  reflect  seasonal  changes. 

Population  Status:  Reflects  tribal,  ethnic,  religious, 
and  political  affiliations.  The  Philippine 

government,  for  example,  currently  classifies 
baranpays  as  insurgen t-con crol led ,  insurgent- 
influenced,  or  non-insurgent  influenced. 

Trap:  Likely  targets  for  insurgent  sabotage  or  strike 

operations.  Particularly  critical  in  urban  or 
sub-urban  areas  where  there  is  a  higher  density  of 
physical  inf rastruc ture  (buildings,  houses,  power 
stations,  radio  stations,  etc.) 

Insurgent  Logistics  Sustainability:  Areas  providing 

fwod,  water  and  supplies  to  the  guerrillas. 

The  analyst/advisor  can  "mix  and  match"  as  required  to  suit 

his  area  of  operations,  the  threat,  and  his  staff  resources. 

He  should  avoid  being  inundated,  however,  with  unusable 
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information  and  avoid  the  pit  fall  of  overlays  becoming  end 
in  themselves.  The  section  on  integration  will  discuss 
fuuing  the  information  on  these  overlays  to  produce  Named 
Areas  of  Interest  (NAD  or  target  folders. 

The  incident  overlay  is  the  most  important  one.  **  It 
provides  a  visual  represen tation  of  events  in  an  area  over  a 
given  period  of  time.  Non-standard  symbols  should  be 
explained  on  the  overlay.  Each  incident  reflected  on  the 
overlay  should  be  accompanied  by  a  date  and  a  reliability/ 
credibility  rating.  Lastly,  incident  overlays  should  be 
filed  for  later  use  in  pattern  analysis  as  a  visual  record 
of  events. 

A  variation  of  the  incident  overlay  is  the  personalities 
and  contact  map.**  This  map  (or  overlay)  is  used  to  track 
the  movements  and  contacts  of  individuals,  usually  in  an 
urban  setting.  It  requires  a  large  scale  map  as  well  as  a 
plan  of  consistent  surveillance.  It  is  essentially  link 

analysis  on  a  map.  (See  Integrating) 

Overlays  have  proven  only  as  useful  as  the  accuracy  of 
the  data  they  reflect.  The  analyst/advisor  should  update 
overlays  through  aerial /ground  reconnaissance  and  photo 
imagery . 

Another  common  graphic  useful  in  recording  information 
is  the  standard  line-and-block  chart.*T  An  example  of  Viet 
Cong  village  inf restructure  using  the  l ine-and-bl ock  method 
is  shown  in  Figure  7.**  Line-and-block  charts  may  also  be 
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useful 


in 


par tray ing 


mature  military 


Each  unit  block  should  contain 
••rial  number  which  contains  the 
chart. 


( querr i 11a) 
the  file  location  or 
information  depicted 


units, 
repor t 
on  the 


Figure  7. 


tXAl  UA.t  las 

The  ana  1 yst/advisor  must  evaluate  all  information  before 
the  fusion  and  analysis  process.  He  must  have  a  method  of 
determining  the  validity  of  data.  Failure  to  do  this 
improperly  weights  information  and  leads  to  invalid 
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cone  lu’r  ions . 


The  U.S.  military  alphanumeric  system  for  evaluation  ia 
simple  and  commonly  used  by  police  agencies  and  U.S.  allies. 
The  system  assigns  a  v^.'ue  to  the  reliability  of  the  source 
and  the  credibility  of  the  information.  Chapter  2,  FM  34-3, 
provide*  a  full  explanation  for  the  criteria  shown  belowi4*' 


1- confirmed  by  other  sources 

2- probabiy  true 

3- possibly  true 

4- doubtfully  true 
9-improbable 
6-truth  cannot  be 

judged 

In  some  situations,  the  sheer  quantity  of  data  may ,  be 
overwhelming.  Here,  evaluation  ratings  act  also  as 
discriminator* .  If  the  analyst/advisor  is  dealing  with 
large  volumes  of  information,  he  may  establish  rating 
minimums  for  posting  on  inc  ,dent  maps  or  SITMAPs. 

Additional  considerate  on*  in  evaluating  information 
ire:  m> 

1.  Characteristics  of  the  Source 

A.  Sensory  limitation.  What  was  really  "seen"  or 
"heard"?  All  sources,  human  and  technical  are  limited  in 
various  ways. 

0.  Physical  condition.  Fatigued?  Apathetic?  On 
drugs/alcohol . 

C.  Bias.  How  is  the  source  prejudiced? 


A-completely  reliable 
B-usually  reliable 
C-fairly  reliable 
D-not  usually  reliable 
E-  unreliable 
F-rel iabi 1 ity  cannot  be 
Judged 
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D.  Knowledge  and  experience 

2.  How  far  removed  is  the  evaluator  from  the  source? 

3.  Does  the  reported  information  correlate  with  other 

data? 

Sifting  data  to  determine  false  or  only  partially  true 
information  is  the  objective  here.  Colby  states  that  during 
the  Phoenix  program,  he  generally  required  three  separate 
identifications  of  inf rastruc ture  members  before  they  were 
listed  on  official  rosters.  *i>  In  some  cases  there  will  be 
no  determining  the  accuracy  of  information.  The  analyst/ 
advisor,  however  should  correlate  the  information  with  other 
he  has  received  for  confirmation.  Information-sharing 
arrangements  with  other  agencies  can  facilitate  this. 

lgtia.caUng 

Next,  the  analyst/advisor  assembles  information  to  make 
it  meaningful.  The  objective  is  to  collate  data  which  may 
arrive  in  volume  and  may  appear  to  be  unrelated.  A 
technique  for  doing  this  is  link  analysis.** 

Law  enforcement  units  often  use  link  analysis  to 
develop  intelligence  on  ganqs  and  organized  crime.  Since 
insurgencies  and  organized  crime  share  common  methods  of 
operation,  the  analyst/adviaor  will  find  link  analysis 
useful  in  constructing  the  political  order  of  battle. 

Link  Analysis  is  a  simple,  common  sense  method  of 
sorting  information  by  visually  portraying  relationships. 
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Over  time,  lateral  and  vertical  relationships  become 
apparent  as  activities  reveal  a  hierarchical  pattern.  The 
analyst/advisor  then  templates  these  organizations  against 
generic  cells  and  his  country-specific  model.  This  is  the 
equivalent  of  doctrinal  templating.  The  activity  of  the 
individual  insurgents,  along  with  information  from  captured 
documents,  interrogations ,  and  so  forth,  reveals  cell  types 
( operations  1 ,  auxiliary,  etc.).  Thus,  the  analyst/advisor 
develops  a  construct  of  the  insurgent  shadow  government,  or 
parallel  hierarchy.  The  fallowing  example  ia  illustrative 
of  the  actual  techniques  involved: 

A  hamlet,  or  sifcj'o,  resident  reports  being  taxed  by  the 
insurgents.  Upon  questioning,  other  residents  admit  to 
being  taxed,  but  by  a  different  individual.  One  resident 
states  that  she  thought  one  of  the  tax  collectors  came  from 
a  family  in  a  neighboring  hamlet. 

The  analyst/adviaor  targets  the  two  tax  collectors,  as 
well  as  the  implicated  family  in  the  next  hamlet,  for 
intelligence  collection.  Ha  tracks  their  activities 
recording  contact  with  other  individuals  and  organizations. 
Concentrating  on  repetitive  contacts,  he  tries  to  determine 
the  flow  of  money,  food,  in  format ion-any thing  that  indicates 
hierarchy . 

Using  a  number  of  link  analysis  aids,  the  analyst 
builds  an  order  of  battle  (OB),  of  sorts.  He  can  "wargame" 
this  model,  changing  it  to  reflect  other  possible 
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arrangements  if  there  is  some  ambiguity.  Appendix  D  lists  a 
seven  step  process  for  constructing  a  link  analysis  matrix 
and  diagram. 

Before  going  further  in  the  intelligence  process,  the 
analyst  now  goes  back  to  selecting/prioritizing  targets  and 
cues  his  collectors  to  highest  value  targets.  As  further 
information  comes  in,  he  confirms  or  changes  the  link 
diagram. 

Link  analysis  without  benefit  of  an  informant,  though 
valuable,  can  be  a  long  conjectural  process.  Consider  the 
difficulty  in  ferreting  out  an  intelligence  cell  whose 
leader  is  an  illegal  cadrej  whose  members  are  legal  cadre 
(community  members)  located  in  different  aitioa j  and  whose 
members  pass  information  via  drop.  (See  Figure  B. )  If  the 
insurgents  communicate  properly,  the  cell  may  be  impossible 
to  fully  detect. 
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In  tgrpreting 


After  integrating  (collating)  available  information,  the 
analyst/advisor  develops  the  insurgent's  status,  intentions, 
or  course  of  action  essentially  through  inference.  Thus  the 
next  steps  are  inference  development,  inference  testing  or 
wargaming,  and  finalization  of  inferred  enemy  situation  or 
course(s)  of  action.  **"  The  connection  between  these  steps 
is  inferential  logic  or  reasoning  based  on  the  analyst's 
experience,  recall,  and  powers  of  correlation. 

The  analyst/advisor  looks  primarily  for  patterns  of 
activity.  These  patterns  will  yield  contacts,  indicate 

organizations,  or  reveal  intent.  Practically  speaking,  the 
analyst  will  constantly  move  between  integration  and 
interpretation ,  alternately  using  link  and  pattern  analysis 
to  identify  the  enemy. 

Pattern  analysis  is  a  kind  of  situational  templatinq 
wherein  the  analyst/advisor  takes  the  modus  operand!  of  the 
insurgents  and  lays  it  over  the  indicators  or  patterns 
reported.  He  then  makes  an  inference  based  on  these 

factors. 

The  current  field  manuals  refer  to  pattern  analysis 
briefly  but  don't  explain  it.*-  It  is  imprecise  and  best 
described  through  example.  It  relies  on  the  analyst's 
judgement,  and  his  facility  with  the  tools  of  the  trade 
(overlays,  files,  collection  assets).  Although  pattern 
analysis  is  the  heart  of  COIN  intelligence  production,  a 
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field  manual  is  inadequate  for  imparting  expertise.  It  is  a 
•kill  learned  best  through  execution  (or  practical 
exercise! . 

The  following  examples  are  offered  in  illustration  of 
the  method.  The  last  example  uses  a  scenario. 

Example  1.  It  is  difficult  or  impossible  to  track 
units  such  as  guerrilla  squads  or  armed  propaganda  teams. 
They  have  virtually  no  signature.  1 t  is  possible,  however, 
to  track  the  leaders  of  uni  ts  (personalities)  and  the  people 
who  move  with  them.  Informants  normally  report  names  or 
numbers  of  people  since  unit  designations  are  not  apparent. 
SIGINT  usually  yields  names  or  callsigns  as  opposed  to  unit 
identities.  As  the  same  names  and  capabilities  (e.g., 
mortars,  demolitions)  correlate  over  time  (link  analysis), 
the  analyst/advisor  develops  an  order  of  battle  with 
rosters.  Thus,  when  a  SIGINT  (DF  and  monitoring)  report 
indicates  that  two  insurgents  named  Julio  and  Niguel,  and  a 
mortar,  are  at  a  given  location,  the  analyst  lays  this 
against  his  data  bases.  A  data  base  yields  Nortar  Squad  #3, 
six  personnel  habitually  associated  with  it,  two  of  whom  are 
named  Julio  and  Niguel.  Thus,  he  infers  the  unit 
designation,  parent  unit,  unit  commander,  etc.  He  then  re¬ 
injects  this  intelligence  into  the  inferential  reasoning 
process  to  discern  a  broader  scheme  or  intent. 

Example  2.  If  an  insurgent  leader  is  a  known 
womanizer,  and  has  established  "patterns"  of  visiting 
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particular  women ,  this  information  should  be?  in  a  data  base-. 
Hence,  when  the  analyst/advisor  locate*  *  personality  in  a 
given  geographical  areav  the  inaurgent'a  "patterns"  should 
indicate  a  likelihood,  of  contact  with  a  girlfriend  in  that 
area.  The  anal yst/advisor  then  cues  surveillance  or 
interception  assets  to  the  woman's  location  which  has 
become,  do  facto,  a  named  area  of  interest  (NAI),  or  target 
area  of  interest  (TAX). 

Example  3.  (Scenario)  An  insurgent  leader  travels 
with  his  girlfriend  and  has  her  function  as  hi*  RTQ.  Her 
voice  is  distinctive  on  a  radio  net,  thus  allowing  SIGINT 
collectors  to  track  the  insurgent's  movements,  A  SIGINT 
report  locates  the  insurgent  leader  in  the  village  of 
Vallarto,  near  the  small  city  of  Santa  Lucia.  The 
analyst/adviaor  checks  the  personality  and  Vallarto  files  to 
determine  when  the  insurgent  last  visited  Vallarto.  The 
answeri  three  time*  in  the  last  12  months.  The  analyst  then 
retrieve*  the  incident  overlays  which  correspond  to  those 
dates.  The  overlays  reflect  two  terrorist  bombings  in  Santa 
Lucia,  on  military  or  police  facilities,  on  dates 
corresponding  to  two  of  the  insurgent’s  three  appearances  in 
Vallarto.  The  analyst  then  checks  the  data  bases  to  see  if 
the  insurgent's  movement*  correspond  to  other  terror 
bombing*.  If  »o,  it  will  reinforce  the  conclusion  that  a 
terrorist  bombing  is  imminent  in  Santa  Lucia.  The  analyst 
then  notifies  the  appropriate  agencies  or  military  units. 
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Lastly,  the  analyst  may  find  flaw  charting  a  valuable 
tool.BB  Whereas  link  analysis  provides  a  snapshot  of 
associations,  flow  charting  depicts  a  progression  of  events 
or  commodities  over  time  or  distance.  It  is  a  general 
purpose  aid  to  analysis,  and  is  appropriate  for  use  as 
needed  at  any  time  in  the  process.  Flow  charting  normally 
falls  into  two  categories!  Event  Flow  Analysis  and 

Commodity  Flow  Analysis.  Appendix  E  gives  a  description  of 
the  techniques  and  a  fuller  appreciation  of  their  utility. 

Disseminating. 

Ideally  joint  fusion  and  analysis  centers  should  exist 
to  bring  together  representatives  of  all  military, 
parami 1 i tary ,  and  police  organizations  concerned  with 
intelligence  analysis.  This  aid3  inf Drmation-sharing  among 
all  parties.  If  there  is  no  joint  effort,  then  the 
analyst/^idvisor  must  determine  which  intelligence  products 
go  out  and  to  whom.  Sasic  security  and  dissemination 
fundamentals  such  as  "need  to  know"  should  be  observed. 

Dissemination  has  several  principal  considerations: 
security,  timeliness,  and  packaging.  Security  is  normally  a 
matter  of  standard  procedure  while  timeliness  is  matter  of 
production  and  delivery.  The  format  and  quality  of  the 
product,  however,  is  al 1 -important .  The  goal  of  the 
identification  process,  then,  is  to  produce  Tactical 
Intelligence  Support  Packages,  commonly  known  as  target 
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folders . 


Target  folders  should  include  all  intelligence 
available  to  the  analyst/advisor  pertinent  to  the  target  in 
a  format  useable  by  host  nation  forces.  Creating  a  target 
folder  necessarily  means  fusing  intelligence  from  overlays, 
databases,  files,  and  dossiers.  An  example  Mill  serve  best 
to  illustrates 

A  number  of  prominent,  district-level  insurgent  leaders 
meet  in  a  remote  guerrilla  campsite.  The  camp  has  been 
occupied  for  purposes  of  the  meeting.  Ideally,  the  target 
folder  would  include  such  intelligence  as: 

— Updated  maps  and/or  aerial  photographs  of  the  area  and 
the  camp. 

— Strength/Disposi tion  of  security  forces  and  automatic 
weapons . 

--Locations  in  the  camp  area  where  mines  have  been 
encountered.  Other  obstacle  locations. 

— Optimal  direction  of  attack  for  host  nation  forces. 

--Optimal  routes  into  the  camp  where  the  meeting  will  be 
held . 

— Anticipated  actions  of  insurgent  leaders  upon 

initiation  of  attack.. 

— Likely  guerrilla  egress  routes. 

— Likely  destinations  for  escapees. 

— Photos  and  pertinent  dossier  extracts  on  insurgent 
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leaders . 


— Target  windows. 

— Optimal  time  of  attack  based  on  enemy  habits/ 

discipline. 

Target  folders  for  other  situations  will  obviously  have 
different  information.  The  goal  is  to  fi'se  as  much 

intelligence  as  possible  into  the  most  useable  product. 

Int»lUg»nc*  ..CanAac 

The  preceding  discussion  on  tactical  intelligence 
support  packages  implies  a  sophisticated  and  well -staffed 
analysis  center.  More  probably  the  analyst/advisor  will 
find  himself  in  an  austere  situation,  assisting  a  host 
nation  staff  with  various  levels  of  training.  A  grasp  of 
the  administrative  organization  of  the  intelligence  center 
is  thus  essential. 

The  three  critical  functions  of  an  intelligence  center 
are  collection,  information  storage  and  retrieval,  and 
analysis.  In  line  with  these,  the  analyst, /advisor  should 
work  to  insure  the  following  conditions: 

First,  he  must  establish  the  center  formally  "in  the 
net".  In  other  words,  there  must  be  a  permanent  system,  or 
tasking,  to  insure  the  flow  of  information  into  the  center. 
This  pertains  to  sources  which  he  does  not  immediately 
control . 
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Second,  the  intelligence  files  must  be  comprehensive 
and  functional.  The  systems  described  in  Appendix  B 
suffice. 

Third,  he  must  specifically  designate  personnel  as 
analysts.  M  Though  this  seems  obvious,  without  personnel 
dedicated  to  the  task  of  analysis,  the  quality  of  the 
product  quickly  deteriorates . 

Each  of  these  functions  must  be  present,  regardless  of 
unit  size.  At  the  lowest  tactical  levels,  a  small  operating 
staff  may  be  the  norm.  In  such  a  case,  jobs  should  be 
shared.  If  a  single  individual  is  selecting  intelligence 
targets,  analyzing,  or  doing  both,  the  impact  of  personal 
bias  may  be  substantial.  The  analyst/advisor  should  be 
alert  to  this  in  himself  and  in  the  intelligence  staff. 
Reviewing  collection  plans  or  wargaming  analysis  with  this 
in  mind  can  help  overcome  it.  Finally,  the  analyst/advisor 
should  establish  liaison  with  other  intelligence  agencies. 

In  a  broader  context,  the  development  of  joint  fusion 
and  analysis  centers  is  a  better  solution  than  a  single¬ 
service  intelligence  center.  All  the  principles  of 
organization,  collection,  and  analysis  still  apply.  The 
objective  is  to  unify  the  capabilities  of  police  and 
military  units  which  would  otherwise  conduct  unilateral 
operations  against  the  insurgent  infrastructure.  The  idea  is 
not  now.  This  was  the  charter  of  both  the  Intelligence 
Coordination  and  Exploitation  Program  (ICEX)  and  its 
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successor,  the  Phung  Hoang  program,  in  Vietnam.  The 

American  name  for  Phung  Hoang  was  Phoenix. 

Contrary  to  its  sensational  reputation,  Phoenix  was  an 

overt  program.  It  was  established  by  [South  Vietnamese] 

presidential  decree  in  an  effort  to  centralize  intelligence 

collection,  analysis,  and  dissemination  on  the  Viet  Cong 

inf restructure.  American  advisors  were  assigned  to  it. 

Although  Phoenix  had  committees  at  province  and  national 

levels,  the  district-level  center  was  the  principal 

intelligence  coordination  and  operations  element.  Phoenix 

itself  commanded  no  combat  or  police  units. 

Each  [district]  Phoenix  office  was  supposed  to 
house  representatives  of  the  national  policei  the 
district  S-2  (intelligence  officer)!  the  Military 
Security  Service  (MSS,  the  military  intelligence 
organization  responsible  for  ...  counterespionage 
and  countersubversion ) j  the  Rural  Development 
cadre  (...[its]  members  frequently  learned ...  about 
V.ietcong  activity  as  they  built  schools  and  dikes 
in  the  villages);  and  finally,  the  S-3  (the 
operations  section  of  the  district  staff  which-in 
theory-planned  military  operations  based  upon  the 
targets  generated  by  the  Phoenix  effort).** 

Phoenix  was  to  produce,  then  disseminate  its  products  to  the 

organization  best  suited  to  neutralizing  a  given  target. 

After  the  war,  farmer  Viet  Cong  cadre  member*  testified  to 

Phoenix’s  devastating  effectiveness.  Conversely,  its 

founder,  Robert  (Corner,  and  its  initial  director,  William 

Colby,  have  stated  that  Phoenix  was  only  partially 

effective,  never  reaching  its  potential.  Corruption,  turf 

battles,  quotas,  and  lack  of  cooperation  among  agencies  all 
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worked  to  hamstring  the  program.  As  a  result,  some  district 
Phoenix  center*  functioned  well,  other*  did  not. 

Phoenix's  problems  and  its  reputation  not  withstanding, 
the  concept  is  sound.  But  rather  than  merely  have  police, 
paramilitary ,  and  military  representatives ,  it  must  be  a 
truly  joint  intelligence  effort.  All  host  nation  collection 
assets,  regardless  of  ownership,  would  feed  and  respond  to 
the  center.  Analysts  and  clerical  personnel  as  well  would 
come  from  the  various  services.  Target  intelligence  support 
packages  would  be  forwarded  to  an  executing  unit  by  a  senior 
joint  commander  specifically  empowered  to  task  these 
missions. 

The  identification  of  inf rastructure  is  the  most 
critical  aspect  of  a  sound,  wel 1 -•executed  counterinsurgency . 
I  have  couched  the  techniques  presented  here  inside  an 
established  doctrinal  framework  because  it  is  both 
appropriate  and  familiar  to  the  military  reader.  Undeniably 
the  flavor  of  police  operations  is  present,  as  it  should  be, 
given  the  nature  of  insurgent  inf rastruc ture  and  the  role  of 
police  in  fighting  it. 


SECTION  III 

CONSIDERATIONS  IN  THE 
REDUCTION  OF  INFRASTRUCTURE 

Targeting  and  reducing  inf rastructure  are  two  of  the 
most  controversial  aspects  of  a  counterinsurgency .  In  this 
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section  I  will  briefly  present  considerations  for  the 
analyst/advisor  in  targeting  and  neutralizing  insurgent 
cadre  members. 

Targeting 

Based  on  his  own  predetermined  indicators,  the 
analyst/advisor  will  decide  that  he  has  identified  enough 
inf  restructure  to  do  a  target  analysis.  The  criteria  >:.hown 
is  derived  primarily  from  the  target  analysis  acronym, 
CARVER  ( cri tical i ty ,  accessibi 1 i ty ,  recuperabi 1 i ty , 

vulnerabi  1  ity ,  effect  on  the  population,  recogni  zabi  1  i  ty  )  .  *■* 
Additional  planning  considerations  are  added  for 
completeness. 

1.  How  much  of  the  inf restructure  is  known?  Vet  to  bo 
identified? 

2.  What  is  the  criticality  (importance)  of  the  targeted 
inf  restructure  members?  The  Phoenix  program  .assigned 
suspects  "to  one  of  three  categories!  "A"  for  leaders  and 
...party  members,  "B"  for  holders  of  other  responsible  jobs- 

cadre-and  "C"  for  rank-and-f i le  members  and  followers." 
Colby,  as  the  director  of  Phoenix,  decided  not  to  target  "C" 
members  since  they  were  relatively  unimportant. 

3.  How  accessible  is  the  target(s)?  Is  target 
accessibility  time  sensitive  ? 

4.  How  recuperable  is  the  target(s)?  If  the  target 
can  be  replaced  quickly,  is  it  worth  taking  out? 
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5.  How  vulnerable  is  the  target(s)?  This  is  a 
question  of  forces  available.  What  type  of  forces  are  most 
appropriate-  police,  parami 1 itary ,  or  military?  Are  there 
enough  troops  available?  Are  they  sufficiently  trained? 

6.  How  much  of  the  Identified  infrastructure  should  be 
neutralized?  Is  there  an  “A,B,C"  criteria  established? 
What  is  the  criteria  for  local  and  district  guerrilla  units 
(vice  party,  civil  inf restructure ) ?  Should  "As"  and  "Bs"  be 
neutralized  as  soon  as  identified  or  only  when  a  complete 
cell  is  Inown?  Should  any  part  be  left  intact?  This  is 
particularly  critical  if  recuperatory  ability  is  high.  If 
only  a  percentage  of  targets  can  be  neutralized  before 
others  are  alerted,  which  are  most  important  (criticality)? 

7.  Can  the  government  protect  the  people  from 
reprisals  ? 

B.  Is  identification  of  the  target  a  problem?  Are 
informants,  ralliers  available  to  identify  insurgents  and  to 
act  as  guides? 

Practically,  the  analyst/advisor  will  often  target 
individuals.  Politically,  the  semantics  of  targeting  an 
insurgent  unit  instead  of  an  individual  may  present  a  better- 
option  . 


MiutrilliiUpn 

Neutral ization  means  to  kill,  capture,  or  recruit. 
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Like  " inf rastruc tur*" ,  "neutral i zation "  is  a  uniquely 
American  term.  Like  Phoenix,  it  usually  conjures  up 
draconian  images.  "Reduction"  may  be  a  better  choice  in  the 
future  since  it  is  somewhat  neutral  in  connotation  and 
sufficiently  vague.  However,  it  will  mean  kill,  capture,  or 
recruit. 

In  keeping  with  current  U.5.  military  assistance 
policy,  neutralization  is  the  responsibility  of  the  host 
nation.  That  much  is  clear.  Beyond  this,  little  is  clear. 
The  moral,  ethical,  and  legal  issues  in  a  neutralization 
policy  are  extensive  and  go  well  beyond  the  scope  of  this 
paper.  There  are  several  points  worth  mentioning,  however. 

The  first  is  the  nature  of  the  ideologue. 
Inf restructure  members  who  fit  into  categories  A  and  B  may 
be  called  ideologues.  Certainly  party  members  qualify  for 
that  title. 

Ideologues  are  true  believers.  They  are  more  than 
converts.  Ideologues  have  been  schooled  in  the  philosophy 
of  the  revolution,  often  in  another  country.  Their 
susceptibility  to  an  amnesty  program  is  very  low.  So  too  is 
the  likelihood  of  their  informing,  if  captured.  The 
government  must  kill  or  incarcerate  them  until  the 
insurgency  has  been  eradicated  .*“* 

The  second  point  is  the  issue  of  objective.  At  every 
decision  point,  the  analyst/advisor  must  focus  on  the 
objective.  The  abjective  is  to  enhance  the  legitimacy  of 
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the  hoot  nation'll _ qpEtrnfMllfc.» 


This  must  take  precedence 


over  convenience  in  neutralising  inf restructure.  Put 
plainly,  there  are  time*  when  overwhelming  military  force  is 
appropriate  to  the  target.  There  are  also  times  when 
capture  by  police  better  serves  the  government.  The  arrest 
of  communist  civil  cadre  on  charges  of  murder,  for  example, 
rather  than  terrorism  accomplishes  the  objective  without 
creating  a  revolutionary  martyr. 

The  analyst/advisor ' s  role  here  is  difficult.  He  must 
understand  existing  emergency  legislation  and  other 
politically  sensitive  issues.  He  should  have  clear  guidance 
as  to  his  role  beyond  the  preparation  of  a  target  folder. 
(This  role  should  be  defined  by  the  host  nation  and  the 
analyst/advisor ' s  chain  of  command.)  And  finally,  if  he  has 
credibility  among  his  host  nation  counterparts,  even  his 
unofficial  opinions  will  have  effect.  Whatever  ho  says  or 
does  must  enhance  achievement  of  the  objective. 

SECTION  IV 
CONCLUSIONS 

The  purpose  of  this  monograph  was  to  examine  a 
perceived  weakness  in  the  education  of  intelligence  and 
special  operations  personnel .  Based  on  their  high 
likelihood  of  commitment  as  analysts  or  advisors  worldwide, 
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these  personnel  have  a  particular  need  to  understand  the 
process  of  identifying  insurgent  inf restructure .  The 
procedures  outlined  in  this  study  highlight  and  fill  those 
areas  where  current  manuals  fall  short. 

Intelligence  operations  in  low-intensity  conflict 
deserves  its  own  field  manual.  This  mandates  a  thoughtful 
compilation  of  analysis,  information  management,  and 
counterintelligence  techniques  in  an  insurgency  context. 
Generic  insurgency  study  manuals  should  accompany  it. 
Several  Department  of  the  Army  Pamphlets  published  in  the 
late  1960s  (see  Bibliography)  need  little  revision  to  meet 
this  requirement. 

The  Special  Warfare  Center  and  the  Military 
Intelligence  School  should  include  inf rastructure 
identif ication  in  their  curricula  for  officers  and  senior 
NCOs.  Both  schools  teach  much  of  the  material,  or  related 
subjects,  already.  None  of  the  concepts  are  new.  In  order 
to  incorporate  the  best  law  enforcement  experience,  the 
schools  should  obtain  programs  of  instruction  from  police 
organized  crime  information  centers. 

Lastly,  the  concept  of  joint  intelligence  centers 
modeled  after  the  Phoenix  program  is  one  worth  pursuing  and 
putting  into  doctrine.  The  realities  of  police  forces  and 
police  operations  in  each  nation  will  uniquely  vary  the 
application,  yet  the  concept  can  only  enhance  the  attack  on 
insurgent  inf rastructure. 
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APPENDIX  A 


COMMUNIST  PARTY  OP  THE  PHILIPPINES 
METHODOLOGY* 

Militarily  and  politically,  the  CPP/NPAahas  been  moat 
successful  in  th®  countryside.  It  follows  a  simple  but 
persistent  methodology  for  establishing  its  inf restructure 
in  rumali  '’areas.  The  CPP/NPA  begins  by  sending  a  SemiLegal 
Team  (SLT)into  a  btrsngay,  or  village.  The  SLT  is  a  3-5 
person  'cell  which  uses  any  number  of  cover  stories  to 
penetrate  a  b*r*ng*y  and  begin  its  social  investigation. 

To  create  legitimacy,  it  may  pose  as  representatives  of 
pharmaceutical  or  medical  equipment  companies  conducting  a 
survey;  similarly,  it  may  profess  to  represent  the  Bureau  of 
Fisheries,  or  Forestry,  or  other  government  agencies. 

The  LL.T  quietly  ingratiates  itself  to  the  local  people 
and  begins  to  compile  data.  It  acts  without  noticeable 


1  James  A.  Horris,  "U.S.  Military  Assistance  to 
Philippine  Ground  Forces1'  (  thesis,  USACGSC,  1909),  24-30. 

Some  of  the  thesis  research  is  used  in  this  appendix.  It 
has  been  updated/correc ted  through  recent  interviews. 

aThe  Communist  Party  of  the  Philippines  (CPP)  is 

conducting  an  insurgency  to  overthrow  the  Aquino  government. 
The  New  Peoples  Army  (NPA)  is  the  military  arm  of  the  CPP. 

At  the  lower  levels,  however,  the  lines  are  not  cleanly 

drawn.  Thus  the  insurgents  are  commonly  called  the 

CPP/NPA. 


Ai 


malicious  intent.  Depending  on  its  cover  story  and  other 
circumstances,  the  SLT  may  remain  in  the  barangay 
continuously,  or  depart  and  return  later  to  resume  its 
social  investigation. 

The  SLT  pursues  such  in-formation  as  grievances  against 
local  and  national  government,  grievances  against 
landowners,  prevalence  of  disease  and  illness,  and  the 
number  of  school  drop-outs.  It  also  recruits  villagers  for 
guerrilla  training  at  an  NPA  training  camp.  Often  this 
training  is  couched  in  terms  of  a  "job  offer"  and  school 
drop-outs  are  a  favorite  target. 

The  SLT  identifies  future  leaders  from  within  the 
barangay  population,  as  well  as  those  who  may  prove 
troublesome.  Dossiers  are  compiled.  Through  informal 
discussions,  these  local  leaders  are  gradually  indoctrinated 
and  together  with  the  SLT  form  a  Barangay  Liaison  Group 
( BLG ) .  See  Figure  A1 .  The  SLG  usually  grows  to  include 


At  this  point  the  SLT  begins  conducting  teach-ins. 


As  numbers  grow,  the  Liaison  Group  becomes  known  as  a 
Barangay  Organizing  Group  (BOG).  Bee  Figure  A2.  In  this 
phase  the  SLT  organizes  the  people  into  sectoral  groups  such 
as  peasants,  men,  women,  youth,  and  laborers.  A  variation 
on  this  theme  is  for  members  of  the  BOG  to  begin  influencing 
members  of  already-existing  sectoral  groups  to  which  they 
belong.  The  BOG  also  begins  forming  a  militia. 


Figure  A2. 

Formal  training  is  now  injected.  Using  classroom 
lectures,  the  SLT  indoctrinates  villagers  in  such  subjects 
as  ideology  and  simple  Marxist  economics.  Meanwhile 
informal  training  through  discussion  and  teach-ins 
continues . 

It  is  important  to  note  how  the  barangay  is  organized. 
Men,  women,  and  youths  are  all  placed  in  different  groups 
with  different  leaders.  In  this  way,  the  communists 
unobtrusively  subvert  traditional  family  cohesiveness  and 


further  create  vu 1 nerabi 1 i ty  to  their  teachings. 

The  militia  usually  consists  of  10-14  local  males,  and 
undergoes  an  evolution  of  its  own.  Each  phase  is  called  a 
category.  In  the  first  category,  the  militia  men  are  new, 
unarmed ,  and  used  in  local  intelligence  or  early  warning 
nets.  In  the  second  category,  they  are  given  some  small 
arms)  these  are  usually  few  and  often  crude.  Missions  are 
usually  defensive  in  nature.  As  they  become  better  trained, 
they  will  be  fully  armed  and  considered  category  three. 
They  will  conduct  offensive  operations  and  may  be  placed 
under  the  operational  control  (QPCON)  of  the  District 
Guerrilla  Unit  for  selected  missions. 

Once  in  the  third  category,  five  to  seven  individuals 
from  the  militia  will  be  formed  into  a  Smndatahang  Yunit 
Pangpropaganda ,  (SYP).  On  the  direction  of  the  SLT  and 
approval  of  District  headquar tens ,  the  SVP  will  brutalize  or 
kill  selected  inhabitants  to  enhance  the  propaganda  effort. 
This  may  mean  meting  out  "revolutionary  justice"  to  a  local 
criminal,  AFP  col laborator ,  or  offending  landowner;  or  it 
may  simply  mean  shooting  an  individual  who  resists 
indoctrination.  The  MPA  is  rarely  arbitrary  in  selecting 
its  initial  victims.  It  establishes  legitimacy  in  the  eyes 
of  the  people  by  providing  visible  relief  to  an  immediate 
problem,  with  an  astute  eye  toward  its  propaganda  value. 

Again  there  are  variations  to  this  methodology.  It  may 
not  be  wise  to  use  a  SYP  against  the  people  of  its  own 


barangay  or  sitia.  *  In  this  event,  the  SLT  contacts  the 
District  Party  Committee  (DPC)  and  imports  a  SYP  from  a 
different  area  with  no  allegiance  to  the  local  populace. 
The  SYP  is  a  familiar  feature  of  communist,  mass-based 
insurgencies,  more  commonly  known  as  an  Armed  Propaganda 
Team  or  Unit,  (APT  or  APU) . 

As  the  communist  hold  over  the  barangay  grows  tighter, 
the  BOG,  growing  ever  larger,  becomes  known  as  a  Barangay 
Organizing  Committee,  or  BOC.  See  Figure  A3.  The  BDC  is  a 


Figure  A3, 

further  step  in  the  progression  toward  a  full-fledged 
shadow  government.  Using  auxiliary  cells,  it  organizes 


*  A  sit jo  is  a  small  community 
geographic  area  of  a  barangay .  It 

Vietnamese  hamlet.  Just  as  there  are 
village,  so,  too,  there  are  usually 
barangay. 


located  within  the 
is  analogous  to  the 
several  hamlets  in  a 
several  sitio*  in  a 


functional  group*  (e.g. ,H*al th,  Finance,  Education)  to  co¬ 
opt  th#  civil  administration  of  th#  barangay.  The  90C 
continues  to  infiltrata  and  diract  tha  sactoral  group* 
pravioualy  established,  while  expanding  its  activities  in 
other  areas.  Call  leaders  step  up  recruiting  for  NPA 
training  camps,  form  intelligence  (spotter)  networks,  and 
develop  logistical  support  cells  for  the  guerrillas. 

The  recruiting  mandate  placed  upon  cell  leaders  never 
ceases.  Recruits  either  rmmain  in  the  barsngsy  militia,  a r 
go  to  guerrilla  training  camps.  Graduates  of  the  training 
camps  are  sent  to  either  a  DGU  or  Regional  Mobile  Unit 
( RMP) .  The  District  Guerrilla  Unit  responds  to  the  District 
Party  Committee  ( DPC )  and  is  not  subordinate  to  the  RMP. 
Similarly,  the  Regional  Party  Committee  alone  directs  the 
activities  of  the  Regional  Mobil*  Unit,  if  one  exists.  The 
NPA  High  Command  draws  forces  as  needed  from  the  RMP*,  but 
only  for  special  purpose  units  (e.g.,  Sparrow  teams).  It 
does  not  command  the  RMPs.  And  as  of  this  writing,  there 
are  no  known  Main  Force  units. 

As  the  B*r*ng*y  Organizing  Committee  matures,  the 
government's  control  deter iorates .  The  SOC  extracts 
revolutionary  taxes  from  the  people  and  protection  money 
from  plantation  owners  and  local  businesses.  Having  set  the 
wheels  in  motion,  the  original  5LT  forms  a  new  nucleus  from 
within  the  community  itself.  It  then  moves  on  at  the 
direction  of  the  DPC  to  organize  another  barangay.  All 
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these  steps  portend  the  final  •volution  of  the  bsr&ngay  into 
•  Barergsy  Revolutionary  Committee  (SRC).  See  Figure  A4. 


Figure  A4. 

The  B*r*ng*y  Revolutionary  Committee  is  the  highest 
farm  of  political  organization  that  the  CPP/NPA  will  pursue 
in  a  b*r*ngsy.  It  is  a  parallel  hierarchy  which 

theoretically  co-opts  every  function  of  the  established 
government.  The  QRC  is  composed  of  a  Secretariat  and  cell 
leaders  from  the  various  front  ( sectoral / func tional )  group*. 
The  Secretariat  is  the  executive  committee  for  the  BRC .  It 
includes  the  Semilegal  Team,  selected  front  group  leaders, 
and  a  communist  party  cell  if  one  is  located  in  that 
b*rmngny. 

The  communist  party  cell  is  known  as  a  Party  Branch. 


This  is  a  generic  term  and  Party  Branches  exist  in  ivery 
tier  of  tha  inf restructure .  A  Party  Branch  collocates  with 
a  BRC  to  exercise  greater  control  ovar  it.  Another 
variation  has  tha  Party  Branch  cantrally  located  within  a 
portion  of  a  district  to  manage  tha  activities  of  several 
btrmngsyu.  Sea  Figure  AS. 


Figure  AS. 
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In  c»4i  ty,  tha  number  of  Party  Branchs*  is  not  as 
graat  <;s  tha  rcsdsr  might  infar.  In  soma  areas,  the 
hiararchy  of  Regional/Prnvinuial/District  Party  Committees 
doss  not  fully  exist.  In  these  <tases,  a  single  Party  Branch 
and  its  Party  Committee  must  fulfill  tha  roles  of  several. 

The  influence  of  the  CPP/NPA  is  by  Vra  means  pervasive 
in  the  Philippines.  However,  it  is  crucial  to  grasp  the 
point  that  the  CPP/NPA  has,  in  some  cases,  governed  some 
portions  of  the  country  for  nearly  two  decades.  In  these 
areas,  legitimacy  lies  with  the  insurgents,  and  the  federal 
government  is  an  intruder. 


APPENDIX  B 


INFORMATION  STORAGE  AND  RETRIEVAL  SYSTEMS* 


The  classification  system  operates  on  the  simple 


concept  of  categories  of  information,  or  data  bases.  rt 
uses  a  decimal  system  of  numbering  to  provide  for  expansion 
and  accommodates  nested  classes  of  information.  The  index 


■nay  use  3x5  cards,  or  any  other  medium  as  long  as  it  is 
physically,  or  el ec tron ical 1 y ,  expandable.  Maintenance  of 
the  index  is  critical  to  prevent  the  loss  of  information. 


Figure  B1 


SB 


Accession 

This  system  stares  information  (e.g.,  reports, 
documents)  serially.  When  an  analyst  receives  an  item  of 
information,  he  identifies  individuals,  organizations,  etc., 
for  indexing.  He  then  fills  out  new  index  cards,  or 
annotates  existing  ones.  .  The  analyst  assigns  a  sequential 
accession  number  to  the  item  and  notes  it  on  the  appropriate 
index  cards.  He  then  files  the  item  by  serial  number  and 
index  cards  alphabetically. 

To  retrieve  the  information,  the  analyst  searches  the  index 
for  the  subject.  He  then  goes  to  the  numbered  files 
indicated  on  the  index  card. 


Files 


Figure  B2.  35 

The  serial  number  system  shown  below  (Figure  B3.  )  is  usi?d  by 

Organized  Crime  Information  Center  for 
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the  Mid-States 


several 


of  i  ts 


intelligence  files 


This  system  has  the 


advantage  of  simplifying  a  physical  audit. 
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Figure  B3.  * 

The  following  comparison  matrix  allows  the  analyst  to 
determine  which  system  best  suits  his  needs. 


COMPARISON 

CRITERIA 

CLAIIXri CATION  IYITEM 

ACCEIIZON  IYITEM 
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eaaaion  liarlil)  number 
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naadid. 

Sin  of  indexing 
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daolMii  numbers  put  on  indax 
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laotiona  of  Information. 
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retrieval 
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through  antlra  folderi  to 
find  relevant  Itama. 

Mora  eel  active-- aaoh  It  an 
la  numbarad  and  indexed. 

raellltetlon  of 
miiyili 

Analyali  la  hamparad  by  laia 
aalaotivlty  and  ilowar  aeeaaa 
to  individual  itama. 

Analyali  la  faoilltatad  by 
greater  aalaotivlty  and 
falter  aooeaa  to  indi¬ 
vidual  Itama. 

•eeurlty  froi 
compromise 

Aaaamblad  information  (a.y.. 
flla  on  llaek  Pantjiere)  1* 
aaiiar  to  dafina  and  get  to 
by  outaidara.  Loat  or  mii- 
plioad  itama  eannot  ba 
Identified. 

Unaasembled  information 
(thara  la  no  flla  on 
■leak  Pinthiri)  la  more 
difficult  to  define  and 
gat  to  by  outaidara. 
Mining  itama  era  oaally 
identified. 

Ell!  Of 

•Kptmion 

Unlimitad. 

Unlimitad. 

Bill  Of 
purging 

Ilnaa  avary  flla  must  ba 
raviawid,  purging  li  naan- 
airily  difficult. 
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eritarla  la  relatively 

aaay. 

Figure  B4.  * 
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APPENDIX  C 


SELECTED  DATA  BASE  FORMATS 


The  formats  shown  here 
information  needed  in  a  data 
author's  suggestion.  Actual 
choice. 


illustrate  the  types  of 
base/file.  They  are  the 
formats  are  the  analyst's 


Personality 


Name: 

Alias/War  name: 

Rank : 

Assignment/position : 

Cover/ job: 

Education : 

Appearance,  skills,  character  traits: 

Family  Locations:  (immediate  family,  relatives) 
Girlfriends,  wife(s): 

RTO:  (identification,  callsign) 

Reports:  (chronological  entries  listing  date,  source 

identification  and  evaluation  rating,  content  of 
report ) 


C  i 


Order  of  Battle  Card 


Field  Manual  34-3  Intelligence  Analysis  devotes  an 
entire  chapter  to  developing  enemy  Order  of  Battle  (OB).  It 
prescribes  an  array  of  methods  for  documenting  enemy  units. 
It  is  clearly  oriented  toward  a  conventional  foe. 
Nevertheless,  many  of  the  techniques  may  be  modified  for 
counterinsurgency,  and  will  be  particularly  applicable  to 
Main  Force  guerrilla  units. 

Guerrillas  often  remain  dispersed  until  a  mission 

dictates  massing.  Only  during  missions  then  will  the 

company,  platoon  or  squad  exist  as  a  unit.  In  any  case,  a 

formation  considered  a  unit  by  the  insurgent  should  be  so 
considered  by  the  analyst,  and  entered  in  the  data  base 

regardless  of  size.  The  format  below  comes  from  FM  34-3, 

with  a  chronological  record  added  to  aid  in  pattern 

anal ysis : 

Unit  I.D. :  (numerical  designation,  type) 

Subordination:  ( parent/subordinate  units) 

Code  name:  (assigned  by  enemy) 

Nickname:  (unofficial  popular  name) 

Commander: 

Subordinate  Leaders:  (a  full  unit  roster  also  may  be  Kept 

here  or  in  another  file) 

Signature  equipment/ insignia :  (items  which  distinguish  the 

unit  from  other  guerrillas, 
if  any) 

Combat  perf ormance/ef fectiveness :  (analyst's  estimate) 
Location:  (date)  (grid)  (place  name)  (remarks) 
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Camo  File 


Name/number':  (includes  index  number  or  file  location  of 
sketch  or  overlay) 

Location;  (include  map  sheet  number) 

Description;  (buildings,  type  construction ) 

Reports; 


Propaganda  Themes 

Theme:  (salient  topic,1  include  file  location  of  dossier) 
Date(s) : 

Location: 

Description: 

Resul ts: 

Correlation  to  Significant  Event: 


APPENDIX  D 


LINK  ANALYSIS  TECHNIQUES  x 


Use  the  -following  process  to  construct  link  diagrams: 

1.  Assemble  all  raw  data  and  put  in  some  organized  form 
(such  as  a  log).  Necessary  since  basic  data  or  information 
may  come  from  many  different  sources  such  as  files,  patrol 
reports,  SIGINT/wire-tap  records,  informants,  etc. 

2.  Choose  the  data  points  (such  as  names  and/or 
organizations )  important  to  the  analysis  and  abstract  from 
the  narrative. 

3.  Construct  an  association  matrix  and  list  data  points 
(names,  business,  phone  numbers,  etc,),  as  headings  on  the 
diagonal  axis  in  alphabetical  order. 

4.  Enter  the  "association"  points  on  the  matrix.  Where 
there  is  strong  evidence  of  a  link  between  the  individuals 
enter  a  dark  dot  (o)  in  the  matrix,  where  there  is  less  than 
strong  evidence,  enter  an  open  circle  (a). 


Figure  D1 .  Association  Matrix 
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APPENDIX  E 


FLOW  CHARTING  4 

Flow  charting  ha*  few,  if  any,  rule*.  Th»  analyst  usee 
symbols  of  his  own  choosing,  however  hs  should  be 
consistent.  He  should  use  arrows  to  indicate  flow.  Charts 
should  generally  run  top-to-bottom,  and  lef t-to-right . 

Event  flow  charts  consist  of  a  description  of  each 
event  enclosed  by  a  circle  or  rectangle.  These  are 
connected  by  arrows  showing  progression  .ir  direction  Df 
flow.  Arrow*  may  annotate  time  or  distance.  In  the  figure 
below,  circles  represent  events,  and  bones  represent 
results.  Dashed  lines  indicate  suspected  or  possible 
f 1 ow/even  ts . 


Figure  El.  Event  Flow  Analysis2 


£  i 


A  single  flow  chart  will  not  establish  a  pattern. 
However,  event  flow  charts  constructed  for  each  baranaav 
depicting  a  particular  process  (such  as  initial  contact  and 
social  investigation  by  SemiLsgal  Teams)  will  assist  in 
defining  a  modus  pperandi  when  compared  (pattern  analysis). 

Commodity  flow  analysis  is  a  similar  process  but  uses 
different  parameters.  It  is  useful  in  identifying  the 
persons,  organizations ,  and  time  involved  in  thb  flow  of 
commodities.  These  include  money,  narcotics,  food,  arms, 
and  so  forth.  Currency  flow  usually  runs  parallel  but 
opposite  to  the  commodity  itself.  Both  should  be  traced  to 
identify  key  persons  and  organizations .  * 

The  following  example  is  a  common  scenario  in  the 
Philippines  todayi  International  chuhch  organizations 
contribute  money  to  a  Christian  I'blief  ••\-goni za tior.  if" 
country.  The  relief  organization  is  a  front  tor-  the 
insurgency.  The  party  siphons  off  most  funds  and  gives  the 
remainder  to  selected  churches/parishes  in  rural  areas  where 
the  clergy  are  me'nuwrs  of  the  Church  for  National  Liberation 
(CNL).  The  clergy's  orders  are  to  buy  rice  and  store  it 
with  other  supplies  while  contracting  transpor ta tion  to 
remote  baranaavs .  The  contractor  is  legitimate  but  the 
barangays  are  communist  influenced.  Insurgent  cadre  receive 
the  supplies.  Most  is  sent  un-country  to  NPA  training 
camps.  Some  is  used  to  "repay"  villagers  for  food 
previously  taken  by  guerrillas,  amid  much  proselytizing. 

e  2 


In  the  illustration  below,  circles 
individuals,  boxes  represent  organizations . 


Figure  E2.  L'ommocJity  Flow  Analysis 


•T  3 


represen  t 


PkAtstf 


//PA 

CAMP 


ENDNOTES 
APPENDIX  E 


1.  Mid-States  Organized  Crime  Information  Center  (MOCIC) 

poi,  JCtja^AAnfl-I*g.^nlqwj,  p-  i- 

2.  Ibid.,  p.  6,  Illustration  adapted  from  that  cited  here. 

3.  Ibid.,  p.  7  • 


fc'4 


APPENDIX  F 


INTELLIGENCE  CENTER  ADMINSTRATION 

The  anal yst/advisor  should  evaluate  host  nation 
operations  before  recommending  changes.  The  following 
points,  however,  have  proven  useful  in  the  past  and  are 
offered  here  for  the  analyst/advisor’s  consideration. 

1.  Use  maps  with  a  scale  of  i:50,000.  These  are  fairly 
common  and  will  suffice  for  most  intelligence  operations. 
Additionally,  if  the  host  nation  is  supported  by  U.S. 
assets,  it  helps  to  achieve  compatibi 1 i ty .  Urban  operations 
will  require  maps  of  a  much  larger  scale  (1:12,500  or 
greater).  Annotate  overlays  with  map  sheet  numbers , sea  1 e , 
and  dates  before  storing.. 

2.  Low  staff  personnel  turbulence  in  the  host  nation 
unit  is  important.  Longevity  and  continuity  are  significant 
multipliers,  particularly  in  analysts  and  photo  imagery 
in  terpreters . 

3.  Host-nation  analysts  should  be  organized  by 
geographic  area,  not  by  source.  That  is,  rather  than  have 
one  analyst  work  all  SIGINT,  another  all  interrogation , 
etc.,  assign  the  analyst  an  area  (district  or-  barangay)  and 


have  him  fuse  all  reports  on  that  area.  This  develops  area 
expertise.  The  U.S.  analyst/advisor-  must  be  alert  to  bias, 

however . 

4.  Locate  specialists  such  as  photo  interpreters  and 
computer  technicians.  Longevity  is  important  here  also.  If 
these  people  are  not  already  assigned,  or  available  for 
assignment,  seek  habitual  working  relationships . 

5.  Require  analysts  and  specialists  to  work  together. 
For  example,  an  analyst  with  a  SIGINT  (DF)  report  should  be 
talking  to  the  photo  interpreter,  looking  for  additional 
indicators  from  photographs. 

6.  In  some  insurgencies,  the  urban  in f rastruc ture 
employs  high-technology.  If  the  government  seises 
communications  or  computer  equipment  (as  happened  in  Manila 
in  early  1900),  a  technician  should  be  on  hand  to  prevent 
the  loss  of  electronic  information. 

7.  Use  host-nation  treasury  agents  to  assist  in 
tracking  the  transmission  of  funds  through  legitimate  banks 
and  financial  institutions.  This  may  lead  to  in f ras true ture 
contacts  at  the  local  level. 

0.  The  analyst/advisor  should  establish  liaison  with 
other  intelligence  agencies.  Arrange  for  exchange  of 
information  and  intelligence  products. 

The  following  illustration  depicts  an  intelligence  unit  with 
enough  staff  to  segregate  responsibility  (Figure  Fl). 


Figure  Fl ,  1 

The  last  illustration 
unit  of  the  type  found 
(Figure  F2) . 
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depicts  a  w» 11 -staffed,  modernised 
at  a  senior  command  or  national  level 
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